admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,631 Commits 697 Branches 195 Tags
workbook-integration-example
Commit Graph

2451 Commits

Author SHA1 Message Date
Drew Church 3b18c5abcb Added CVE tags to 35 files 2021-10-22 10:03:24 -07:00
Bhavin Patel 1bf4771966 Branch was auto-updated. 2021-10-15 11:47:59 -07:00
Bhavin Patel ccf51c7abe Branch was auto-updated. 2021-10-15 10:33:19 -07:00
Bhavin Patel 2d65d39e0d Branch was auto-updated. 2021-10-15 10:33:18 -07:00
Bhavin Patel d790bf91e1 Branch was auto-updated. 2021-10-15 10:10:47 -07:00
Bhavin Patel 3a7de4c723 Branch was auto-updated. 2021-10-15 10:10:45 -07:00
Bhavin Patel dc5d876d7c Branch was auto-updated. 2021-10-15 10:10:44 -07:00
Bhavin Patel 6ca470d2a1 Branch was auto-updated. 2021-10-15 09:58:09 -07:00
Bhavin Patel bf6bf2d5ab Branch was auto-updated. 2021-10-15 09:58:08 -07:00
Bhavin Patel ec29d5f1e6 Branch was auto-updated. 2021-10-15 09:58:07 -07:00
Bhavin Patel aad7ba4aab Branch was auto-updated. 2021-10-15 09:58:05 -07:00
Bhavin Patel f61b848cd8 Branch was auto-updated. 2021-10-15 09:18:37 -07:00
Bhavin Patel 4c7485f757 Branch was auto-updated. 2021-10-15 09:18:36 -07:00
Bhavin Patel 03193c68fc Branch was auto-updated. 2021-10-15 09:18:35 -07:00
Bhavin Patel 6b30e5b72b Branch was auto-updated. 2021-10-15 09:18:34 -07:00
Bhavin Patel 71d020190c Branch was auto-updated. 2021-10-15 09:18:33 -07:00
mhaag-spl 7c7583a169 Process_id to Process_guid 
Changed from process_id to process_guid. Per issue #1635.
 2021-10-14 08:56:19 -06:00
tccontre 63b2266c04 CARS_UPDATE_MITRE_ID_B7 
CARS_UPDATE_MITRE_ID_B7
 2021-10-14 10:24:20 +02:00
Bhavin Patel aa4d233119 Branch was auto-updated. 2021-10-13 05:53:56 -07:00
Bhavin Patel c9fe91cc03 Branch was auto-updated. 2021-10-13 05:53:55 -07:00
Bhavin Patel 598624ed74 Branch was auto-updated. 2021-10-13 05:53:54 -07:00
Bhavin Patel 6d4c7fd19e Branch was auto-updated. 2021-10-13 05:53:53 -07:00
tccontre fce06ed262 Merge pull request #1700 from splunk/pterodactyl 
Tomorrow Never Haags
 2021-10-13 14:53:35 +02:00
tccontre af7ff4052e CARS_UPDATE_MITRE_ID_B6 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:24:10 +02:00
tccontre e0299db411 CARS_UPDATE_MITRE_ID_B5 
CARS_UPDATE_MITRE_ID_B5
 2021-10-13 11:20:47 +02:00
tccontre 14e3597bf4 CARS_UPDATE_MITRE_ID_B4 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:13:24 +02:00
tccontre da17a2a938 CARS_UPDATE_MITRE_ID_B3 
CARS_UPDATE_MITRE_ID_B3
 2021-10-13 11:07:20 +02:00
mhaag-spl 95ad76f9ba Update suspicious_wevtutil_usage.yml 
Resolving #1669 . Thank you!
 2021-10-11 12:17:40 -06:00
mhaag-spl f6804d708b Fixes and removed duplicate 2021-10-08 12:33:23 -06:00
tccontre 5226dbd99c privilege_escalation_persistence 2021-10-08 14:23:55 +02:00
root 393aad02aa Added detection testing service results inETW Registry Disabled 2021-10-08 07:55:48 +00:00
tccontre 87e17c3505 privilege_escalation_persistence 2021-10-07 14:53:56 +02:00
Bhavin Patel c059b05588 Update process_writing_dynamicwrapperx.yml 
minor
 2021-10-06 15:39:16 -07:00
Bhavin Patel 9d90db4a02 Branch was auto-updated. 2021-10-06 14:19:47 -07:00
Bhavin Patel 0f43ba37b6 Branch was auto-updated. 2021-10-06 14:19:44 -07:00
mhaag-spl 1e18798bb7 Update process_writing_dynamicwrapperx.yml 2021-10-06 10:01:44 -06:00
root ba99c4cee8 Added detection testing service results inSdelete Application Execution 2021-10-06 10:45:31 +00:00
root b910a05650 Added detection testing service results inWscript Or Cscript Suspicious Child Process 2021-10-06 09:52:34 +00:00
tccontre fb296c8508 privilege_escalation_persistence 2021-10-06 11:15:47 +02:00
Bhavin Patel 4de1dc9a4d Branch was auto-updated. 2021-10-05 15:17:23 -07:00
Bhavin Patel 1422f287b9 Branch was auto-updated. 2021-10-05 15:17:22 -07:00
Bhavin Patel 64e69c8ef6 Branch was auto-updated. 2021-10-05 15:17:21 -07:00
Bhavin Patel 652af4ce87 Merge pull request #1679 from splunk/remove_unused_files 
Remove unused files
 2021-10-05 15:17:03 -07:00
Detection Testing Service e5541e5ae1 Merge branch 'pterodactyl' of https://github.com/splunk/security_content into pterodactyl 2021-10-05 21:28:05 +00:00
root fa190b9700 Added detection testing service results inProcess Writing DynamicWrapperX 2021-10-05 21:28:04 +00:00
Detection Testing Service 2d9047605e Merge branch 'pterodactyl' of https://github.com/splunk/security_content into pterodactyl 2021-10-05 21:27:15 +00:00
root 87d7b8a114 Added detection testing service results inWinhlp32 Spawning a Process 2021-10-05 21:27:14 +00:00
root 8cd4c56855 Added detection testing service results inMalicious InProcServer32 Modification 2021-10-05 21:23:41 +00:00
mhaag-spl 8181c7d15a Update malicious_inprocserver32_modification.yml 2021-10-05 15:02:46 -06:00
mhaag-spl fe02d867a9 fix 2021-10-05 14:59:00 -06:00